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RECONFIGURING A WATERMARK 
DETECTOR 

RELATEO APPUCA110N DATA 

lliis application claims priority to application 60/134, 
782, filed May 19, 1999, incorporated herein by reference. 

The subject matter of the present application is related to 
that disclosed in application Ser. No. 09/234,780, filed Jan. 
20, 1999; 09/314,648, filed May 19, 1999; 09/337,590, filed 
Jun. 21, 1999; 09/433,104, filed Nov. 3, 1999; 09/441,819, 
filed Nov. 17, 1999; 09/441,821, filed Nov. 17, 1999; 
09/442,441, filed Nov. 17, 1999; 09/464,307, filed Dec. 15, 
1999; 09/473,075, filed Dec. 28, 1999; 09/476,686, filed 
Dec. 30, 1999; 09/482,752, filed Jan. 13, 2000; 09/484,742, 
filed Jan. 18, 2000; 09/498,223, filed Feb. 3, 2000; 60/180, 
364, filed Feb. 4, 2000; 09/520,406, filed Mar. 8, 2000; 
09/563,664, filed May 2, 2000, and 09/09/562,517, filed 
May 1, 2000. 

FIELD OF THE INVENTION 

Ttic present invention relates to applications of digital 
watermarking in conjunction with audio, video, imagery, 
and other media content. 

BACKGROUND AND SUMMARY 

Watermarking (or "digital watermarking'*) is a quickly 
growing field of endeavor, with several different approaches. 
The present assignee's work is reflected in U.S. Pat. No. 
5,862,260; in copending applications Ser. No. 09/503,881 
and 09/452,023; and in published specifications WO 
9953428 and WO0007356 (corresponding to U.S. Ser. Nos. 
09/074,034 and 09/127,502). A great many other approaches 
are familiar to those skilled in the art. The artisan is 
presumed lo be familiar with the full range of watermarking 
literature. 

In the present disclosure it should be understood that 
references to watermarking encompass not only the assign- 
ee's watermarking technology, but can likewise be practiced 
with any other watermarking technology. 

The invention relates to methods, devices and systems for 
reconfiguring a watermark detector. In many appHcations, it 
is useful to be able to change the operation of a watermark 
detector. Such changes may include changing bow the 
watermark detector decodes or interprets a watermark 
embedded in a signal of a given media type, such as audio, 
video or still images. 

'ITie ability to reconfigure a watermark detector is advan- 
tageous in many applications. When watermark detectors 
are deployed widely in consumer electronic devices and 
software, the capability to reconfigure the watermark detec- 
tor reduces or prevents the devices and software from 
becoming obsolete when changes to the detector are needed. 
In content management schemes, where the watermark is 
used as a security feature, the security mechanism may be 
hacked. In other applications, the watermark technology 
provider may want to incorporate new features into the 
watermark detector, expand the message payload of the 
watermark, or change how the watermark payload is inter- 
preted. In these circumstances, it is advantageous to be able 
to reconfigure a watermark detector, and particularly, to 
reconfigure the detector remotely. 

One aspect of the invention is a method for reconfiguring 
a watermark detector, llie method decodes a watermark 
embedded in a signal of a given media type, such as an 
image or audio signal (e.g., still images, motion pictures, 
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audio, video, etc.). The watermark includes a command 
signal used to trigger a change in operation of the watermark 
detector. Based on the command signal, the method changes 
the operation of the watermark detector. This change may 

5 include changing how the watermark detector decodes or 
interprets a watermark in a signal of the media type. 

The scope of this method encompasses a variety ,of 
implementations. Tne command signal may be represented 
as one or more bits of a watermark payload carried by the 
watermark. Changing the operation of the detector may 
include re-programming it or altering how it interprets 
watermark data embedded in a media object. For example, 
the method may transfer firmware instructions to the detec- 
tor to replace instructions stored earlier. As another example, 
the command may change the operation of the detector 
according to a preprogrammed rule. The mle may define a 
change in watermark key, for instance. Yet another example 
is changing the operation of the detector by changing how a 
device responds to the watermark signal extracted from a 
media object. The behavior of a hardware or software media 

20 player, for instance, may be updated to respond diQ'erently to 
the watermark signal, and specifically, to the message car- 
ried in a watermark payload. 

The method may use watermark payload data to change 
the operation of the detector. For example, the payload may 

25 specify instructions or watermark key data. In response to 
this payload data, the detector may install and execute new 
instructions or use the new watermark key to decode water- 
marks in media objects. 

Another aspect of the invention is an alternative method 

3Q for reconfiguring a watermark detector. This method 
receives a media object and a command associated with the 
media object signaling that the watermark detector requires 
an upgrade lo decode a watermark from the media object. In 
response to the command, the method updates the water- 
mark detector to create an updated watermark detector. It 
decodes the watermark from the media object with the 
updated watermark detector. The command may be encoded 
in a watermark in the media object, or may be conveyed in 
a channel different than the watermark channel yet trans- 
mitted along with the media object (e.g., out-of-band chan- 
nels like a file header or footer, sub-titling data channel, SCA 
channel, etc.). The scope of this method encompasses a 
variety of implementations. In addition, aspects of this 
method may be used in combination with aspects of the 
method summarized earlier. 

45 Yet another aspect of the invention is a re -programmable 
watermark detector. The detector comprises a watermark 
decoder for detecting a command to upgrade the detector. It 
also includes instructions that are replaceable in response to 
detecting the command to upgrade the detector. The instruc- 

50 tions may be conveyed to the watermark detector along with 
a media object, either in a watermark payload, or a channel 
other than the watermark channel. 

Another aspect of the invention is a method of an encod- 
ing an upgrade trigger in a watermark. The method receives 

55 a media object of a given media type, and encodes a 
watermark into the media object. The watermark includes a 
command signal used to trigger a change in operation of a 
watermark detector. When received in a detector, this change 
operates to alter how the watermark detector decodes or 

60 interprets a watermark in a signal of the media type. 

Further features and aspects of the invention will become 
apparent with reference to the following detailed description 
and accompanying drawings. 

g5 BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a diagram showing the participants, and 
channels, involved in the distribution of music. 
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FIG. 2 shows a conceptual model of how music artists, greatest risks occurs once the music has been delivered to 

record labels, and E-Music distributors can all interact with the consumer (whether by tangible media, by traditional 

a Media Asset Management System, of which several are broadcast media outlets, by emerging digital distribution, or 

detailed in the following specification. otherwise). 

DETAILED DESCRimON ' general idea of embeddmg auxiliary data into music 

(i.e. watermarking) has been widely proposed, but so tar has 

For expository convenience, much of the following dis- been of limited applicability, 

cussion focuses on music, but the same principles and por example, GoodNoise is planning to embed a digital 

techniques are largely or wholly applicable to other source signature— termed a multimedia identifier, or MMI— in its 

data, whether non-music audio, video, still imagery, printed 10 mP3 music. MMI will register the song and its author with 

materials, etc. a licensing number. In addition to providing information 

Music Asset Management ^l^"' ."'^ .songwriter and distributor, this digital encoding 

* may also mclude lyrics, liner notes, and other information. 

Referring to the figures, the music distribution process But all of the proposed uses serve only to convey informa- 

begins with a creative artist 10. The artist's music has ^5 ^^^^ ^^^^ ^j^^ distributor to the consumer; use for "tracking" 

traditionally been distributed by a record label 12. (While is actively disclaimed. (Wired News, "GoodNoise Tags MP3 

the following discussion refers to distribution through such FUes," Feb. 3, 1999.) 

a label, it should be understood that such distribution can xhc Genuine Music Coalition— a partnership of various 

just as well be effected directed under the artist's control, companies in the music distribution business— likewise has 

without a record label intermediary.) 20 announced plans to employ watermarking of MP3 music. 

In traditional distribution 14, the record label produces The watermarking technology, to be provided by Liquid 

tangible media, such as records, tapes, videos (e.g. music Audio, will convey data specifying the artist or producer 

videos), and CDs 16. These media are physically distributed contact, copyright data, and a number to track ownership, 

to end-consumers 18. Additionally, the label 12 distributes The Coalition hopes that the provision of this embedded 

the music media to outlets 20, such as radio and TV stations, information will help thwart piracy. Industry observers 

cable and satellite systems, etc., which broadcast (or believe Liquid Audio will next introduce playback lechnol- 

narrowcast) the artist's work to an audience. Distribution ogy only plays audio in which its watermark is detected, 

through such media outlets may be monitored by playout (Wired News, "Liquefying MP3," Jan. 23, 1999.) 

tracking services. Playout tracking data, collected by firms A similar initiative has been announced by the Recording 

including Arbitron, Nielsen, ASCAP, BMI, etc., can be used Industry Association of America (RIAA). Termed the Secure 

to compute royalty payments, to verify broadcast (e.g. for Digital Music Initiative (SDMI), the program seeks to define 

advertising), etc. a voluntary specification that will assure proper compensa- 

Increasingly, the distribution of the music to the media tion to those who produce and distribute music. One element 

outlets is performed electronically. Such distribution first of the system will likely be a watermarking component, 

took the form of analog audio over high quality landlines or (Dow Jones Newswire, "Spurred By Maverick Technology, 

satellite channels. Digital audio quickly supplanted analog Music Industry Eyes Web," Dec. 31, 1998.) 

audio in such distribution channels due to higher fidelity. Yet another initiative has been announced by Solana and 

More recently, distribution of the music from the record ASCAP. Other companies promoting watermarking for 

labels to the media outlets has occurred over secure links, music include Aris Technology, MCYxom, and AudioSoft. 

now including the internet. Such security was first provided The watermark payload can represent various types of 

simply by scrambling the audio signal or data. More sophis- data. An exemplary payload includes data relating to the 

ticatcd "container" -based systems are now coming into artist, distribution entity, title, and copyright date/proprietor, 

vogue, in which the audio is "packaged" (often in encrypted Additionally, the payload can include a digital object 

form) with ancillary data. 45 identifier — an ISBN-like number issued by a central orga- 

Electronic distribution of music to the consumer is also nization (e.g. a rights management organization) to uniquely 

gaining popularity, presently in the MP3 format primarily. identify the work. 

The music providers may deal directly with the public, but Such payload data can be encoded literally (e.g. the title 

more commonly effect such consumer distribution through a by a series of ASCII characters, etc.). In other embodiments, 

newly emerging tier of digital media outlets, such as internet 50 codes or abbreviations can be employed — ^with each code 

sites that specialize in music. From such sites, consumers having a known meaning. In still other embodiments, the 

can download digital audio files into personal digital audio data can be meaningless by itself, but may serve as a key 

players, filie Diamond Rio, and the Audible Mobile Player (e.g., a Unique Identifier, or UID) into a remote data 

devices are some of the first of what will doubtless be a large database or repository. An example of such a remote data 

number of entrants into this personal internet audio appli- 55 repository is a web site at a Master Global Address (MGA) 

a nee market.) Or the downloaded data can be stored by the associated with content, as detailed below, 

consumer-recipient onto any other writeabic media (e.g. An exemplary data payload may, for example, have the 

hard disk, CD, DVD, tape, videotape, etc.). Typically a following format; 
personal computer is used for such downloading, but this 
intermediary may be dispensed with by coupling next gen- 

eration of personal audio appliances to an internet-like link. — — • ■ 

ABCOFFGHI 

The data downloaded by the consumer can be stored ^ 
either in the native digital format, translated into another 

digital format (which translation may include decryption). Where A is a six-byte (8-bits to a byte) ASCII string 

converted into analog and recorded in analog form, etc. 55 serving as a digital object identifier (which may serve as a 

Unauthorized copying or use of the music can occur link to a Master Global Address through a default name 

anywhere in the foregoing channels. However, one of the server, as discussed below), B is a two-byte ASCII field 
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serving as a key into an "artist" field of the remote database, 
C is a three-byte ASCII field serving as a key into a "title" 
field of the remote database; D is a 14-bit field serving as a 
key into a "label" field of the remote database, E is an 8-bit 
integer representing the work's year of first publication 5 
(with 0 representing the year 2000); F is a 10-bit field 
serving as a key into a "price" field of the remote database, 
G is a two-byte usage control string.(detailed belov/), H is 
a streaming data channel, and I is a string of bits serving as 
a cyclic redundancy checksum for the foregoing, (More lO 
sophisticated error correcting checksums can, of course, be 
employed.) This payload format totals 136 bits, exclusive of 
the CRC coding and the streaming data channel. 

This payload is encoded repeatedly, or redundantly 
through the music, so that the fill payload can be decoded ^5 
from partial excerpts of the music. 

The encoding is also desirably perceptually adaptive, so 
that higher energy encoding is employed where the listener 
is less likely to perceive the additional "noise" introduced by 
the encoding, and vice versa. Various techniques for per- 
ceptually adaptive encoding are known. For example, some 
tie the amplitude of the encoded signal to the instantaneous 
amplitude of the music. Others exploit psychoacoustic 
"masking" of one signal by a spectrally- or temporally- 
adjoining signal of higher energy. Still other approaches fill 
gaps in the music's spectrum with watermark energy. 

In other embodiments, perceptually adaptive encoding is 
not used. In some such embodiments, no tailoring of the 
temporal or spectral characteristics of the watermark signal 
is employed. In others, the watermark signal is spectrally 
filtered to emphasize low frequency audio components (e.g. 
less than 500 hz), high frequency audio components (e.g. 
higher than 2500 hz), or mid- frequency audio components 
(500-2500 hz). 3^ 

The streaming data field channel (H) is a medium by 
which data can be conveyed from a distribution site (or other 
site) to the end user. Such data may be entirely unrelated to 
the underlying work. For example, it may serve a utilitarian 
purpose, such as conveying data to a memory in the con- 
sumer device to replace previously-stored data that is out- 
of-date. It may be a commercial channel on which band- 
width is sold for access to the consumer or the consumer's 
device. Essentially any purpose can be served by this 
streaming data field. Unlike most of the other fields, the 45 
streaming data field may not endlessly repeat the same data, 
but can convey data that changes with time. 

Desirably, the encoding is performed in a manner permit- 
ting recovery of the watermark data even if the audio is 
corrupted, e.g. by format conversion, re-sampling, tape wow 50 
and flutter, compression, coding, or various forms of audio 
processing (e.g. filtering, pre-emphasis, re-scaling, etc.). 
One way to provide for such robustness is to encode a signal 
of known character that can be recognized through all such 
corruption. By identifying such known signal, the water- 55 
mark signal can then be decoded. (The known signal can 
take various forms, e.g. a synchronization signal, a marker 
signal, calibration signal, a universal code signal as 
described in applicant's patents, etc.) 

In some embodiments, a watermark "dial-tone" signal is 60 
provided. This dial-tone signal is a low amplitude, relatively 
wideband, repetitive signal that commonly conveys only 
limited information (e.g. a single bit of information). Its 
presence in an audio signal can serve as a "do not record," 
or similar instruction signal. Alternatively, or in addition, the 65 
dial-tone signal can serve as an aid in "locking" to a 
plural-bit digital watermark signal that is also encoded in the 
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audio. For example, the cyclical repetition of the signal can 
serve to identify the start of the plural-bit digital watermark 
signal. Or the spectrum or repetition rate of the signal can 
identify any temporal corruption of the audio. An exemplary 
such signal is detailed as a "simple universal code" in U.S. 
Pat. No. 5,636,292. 

A track of music can be pre-authorized forspecificd types 
of use. For example, the usage control string of the water- 
mark payload may include a six-bit field detailing the classes 
of devices for which the audio is authorized. Each bit would 
correspond to a different class of device. Class 1 devices 
may be personal playback devices with only analog-audio 
output. Class 2 devices may be personal entertainment 
devices capable of outputting music in digital (e.g. MP3, 
redbook, *.WAV) format, as well as analog audio. Class 3 
devices may be personal computer systems (i.e. with essen- 
tially unlimited ability for processing and outputting digital 
audio). Etc., etc. A device to which such MP3 audio is 
provided would check the usage control string data to 
determine whether it is authorized to utilize the audio. A 
personal playback device with analog-only output, for 
example, would examine the first bit of the usage control 
string. If it was "1," the device would be authorized to use 
(i.e. playback) the MP3 data; if it was a "0," the device 
would refuse to play the music. 

In addition to pre-authorization for certain classes of 
devices, the usage control string can also include bits 
indicating the number of permitted playbacks. This data can 
be encoded in bits seven through nine, representing eight 
possibilities: 

0 — no playback permitted 

1 — single playback permitted 

2— two playbacks permitted 

3 — three playbacks permitted 
A — four playbacks permitted 

5 — five playbacks permitted 

6 — -10 playbacks permitted 

7 — unlimited playbacks permitted 

8 — refer to associated data (within the watermark, or 
stored at a remote site) which specifies number of 
permitted playbacks. 

The playback device may include a non -volatile store in 
which the number of permitted playbacks is stored for each 
track of music. The device would decrement this number at 
the beginning of each playback. 

The usage control string can also include a two-bit field 
(bits ten and eleven) indicating recording permissions. A 
value of 0 means that data corresponding to the MP3 audio 
(regardless of digital format) should never be made available 
to another digital device. A value of 1 means that the data 
corresponding to the MP3 data may be made available once 
to another digital device. A value of 2 means that the data 
may be made available an unlimited number of times to 
other digital devices. (Value 3 is reserved.) 

Another data field that can be included in an audio 
watermark is a rating that indicates age-appropriateness. 
Music with violence or sexual themes might be given a 
rating akin to the MPAA "PG-13" or "R" rating. Audio 
appliances may be programmed to recognize the rating of 
incoming music, and to interrupt playback if the rating 
exceeds a certain threshold setting. Various known tech- 
niques can be employed to assure that such settings cannot 
readily be changed, e.g., by juvenile listeners. 

Another data field that can be included in an audio 
watermark is a date field. This field can indicate either the 
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date the music was watermarked, or a date in the future od 
which certain rights associated with the music should 
change. Some consumers, for example may not wish to 
purchase perpetual playback rights to certain musical selec- 
tions. The right to play a selection for 6 months may suffice 
for many consumers, especially if the price is discounted in 
view of the limited term. Such an arrangement would not be 
wholly disadvanjageous, to mu.sic distributors, -since -some 
consumers may end up purchasing miisic twice if their initial 
assessment of a musical selection's appeal was too short- 
sighted. (Naturally, the playback equipment would require a 
source of real-time clock data against which the date field in 
the watermark can be checked to ensure that the playback 
rights have not yet expired.) 

Another of the data fields that can be included in an audio 
watermark specifies technical playback parameters. For 
example, the parameter can cause the playback appliance to 
apply a spectral equalization that favors bass frequencies, or 
treble frequencies, or mid-range frequencies, etc. Other 
pre -configured equalization arrangements can similarly be 
invoked responsive to watermark data. Likewise, the param- 
eter can invoke special-e fleets provided by the playback 
appliance, e.g., echo eflEects, reverb, etc. (Again, such 
parameters are usually represented in an abbreviated, coded 
form, and are interpreted in accordance with instructions 
stored in a memory (either in the playback appliance, or 
linked thereto) 

The same data fields and principles can be applied to 
non-audio content. In video, for example, watermarked data 
can adaptively control the display monitor or playback 
parameters (e.g., color space) to enhance the viewing expe- 
rience. 

Music Asset Management/Commerce 

llie majority of domestic music piracy is not organized. 
Rather, it is a crime of opportunity and convenience. If the 
crime were made more difficult, the alternative of obtaining 
a copy through legitimate channels would be less onerous. 
Similarly, if the procedure for obtaining a copy through 
legitimate channels were simplified, the incentive for piracy 
would be reduced. Watermarking facilitates both — making 
the crime more difficult, and making legitimate music acqui- 
sition easier. 

Consider, for example, the pricing of music in conven- 
tional record stores. A CD (compact disk) may cost $15, but 
its sale may be driven by just one or two popular songs on 
the disk. To obtain these songs, the consumers must pur- 
chase the entire disk, with perhaps a dozen songs of no 
particular interest. This, in essence, is a lying arrangement 
that benefits the record labels while prejudicing the consum- 
ers. Given these circumstances, and a ready opportunity to 
make copies, it is not surprising that customers sometimes 
make illicit copies. 

One classic technique of avoiding purchase of a complete 
collection of music, when only one or two songs is desired, 
is to record the music off the radio. While of dubious 
legality, this technique was popular in the era of combined 
cassette/radio players. However, the desired music was 
sometimes difficult to encounter in a radio broadcast, and the 
quality was less than superb. 

The combined cassette/radio player has now evolved into 
a general purpose computer with wide-ranging functionality, 
and other sophisticated devices. Music can be acquired off 
the web, and can be recorded in various forms (e.g. in a 
personal MP3 player, stored on a hard disk, stored on a 
writeable CD-ROM, played back and recorded on analog 
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cassette, etc., etc.). The quality can be quite high, and the 
erratic broadcast time problems of radio broadcasts have 
been overcome by the web*s on-demand delivery mecha- 
nisms. (Moreover, the music can be downloaded in faster- 
5 than-realtime, a further benefit over recording-off-the-air 
techniques.) 

One hybrid between the new and oldis a novel radio (e.g., 
for use in a car) that has a "capture" button on the front panel 
(or other form of user interface, e.g., a Capture icon on a 

10 GUI). If a user hears a song they want to record and keep, 
they press the Capture button while the song is playing. In 
response, the radio device decodes a watermark embedded 
in the music, and thereby knows the identity of the music. 
The radio then makes a wireless transmission identifying the 

15 user and the desired song. A local repeater network picks up 
the wireless signal and relays it (e.g. by wireless rebroadcast, 
by modem, or other communication medium) to a music 
clearinghouse. The clearinghouse charges the user a nominal 
fee (e.g. via a pre-arranged credit card), and queues the 

20 music for download to a predetermined location associated 
with the user. 

In one embodiment, the predetermined location is the 
user's own computer. If a "live" IP address is known for the 
user's computer, the music can be transferred immediately. 
2^ If the user's computer is only occasionally connected to the 
internet, the music can be stored at a web site (e.g. protected 
with a user-set password), and can be downloaded to the 
user's computer whenever it is convenient. 

In other embodiments, the predetermined location is a 

30 

personal music library maintained by the user. The library 
can take the form, e.g., of a hard -disk or semiconductor 
memory array in which the user customarily stores music. 
This storage device is adapted to provide music data to one 
or more playback units employed by the user (e.g. a personal 
MP3 player, a home stereo system, a car stereo system, etc.). 
In most installations, the library is physically located at the 
user's residence, but could be remotely sited, e.g. consoli- 
dated with the music libraries of many other users at a 
central location. 

40 

The personal music library can have its own internet 
connection. Or it can be equipped with wireless capabilities, 
permitting it to receive digital music from wireless broad- 
casts (e.g. from the clearinghouse). In either case, the library 
can provide music to the user's playback devices by short- 
range wireless broadcast. 

By such arrangement, a user can conveniently compile an 
archive of favorite music — even while away from home. 

Many variants of the foregoing are of course possible. The 
50 radio can be a portable unit (e.g. a boombox, a Walkman 
radio, etc.), rather than an automotive unit. The UI feature 
employed by the user to initiate capture a musical selection 
need not be a button (physical or on-screen). For example, 
in some embodiments it can be a voice-recognition system 
55 that responds to spoken commands, such as "capture" or 
"record." Or it can be a form of gesture interface. 

Instead of decoding the watermark only in response to the 
user's "capture" command, the radio can decode watermarks 
from all received programs, and keep the most recent in a 
60 small FIFO memory. By such arrangement, the user need not 
issue the capture instmction while the song is playing, but 
can do so even after the song is finished. 

In some embodiments, data corresponding to the water- 
mark can be made available to the user in various forms. For 
65 example, it can be presented to the user on an LCD screen, 
identifying the artist and song currently playing. If a corre- 
sponding UI button is activated, the device can so-identify 
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the last several selections. Moreover, the data need not be 
presented to the user in displayed form; it can be annunci- 
ated by known computer-speech technologies instead. 

In embodiments in which the watermark does not convey 
ASCII text data, but instead conveys UIDs, or coded 
abbreviations, the device must generally interpret this data 
before presenting it to the user. In an illustrative 
embodiment, .the device is a pockei-sized FM radio and is 
equipped with a 1 megabyte semiconductor non- vol alive 
RAM memory. The memory includes a data structure that 
serves as a look-up table, matching code numbers to artist 
names and song titles. When the user queries the device to 
learn the identify of a song, the memory is indexed in 
accordance with one or more fields from the decoded 
watermark, and the resulting textual data from the memory 
(e.g. song title and artist) is annunciated or displayed to the 
user. 

In most applications, such memory will require frequent 
updating. The RF receiver provides a ready mechanism for 
providing such updated data. In one embodiment, the radio 
"awakens" briefly at otherwise idle moments and tunes to a 
predetermined frequency at which updated data for the 
memory is broadcast, either in a baseband broadcast 
channel, or in an ancillary (e.g. SCA) channel. 

In variants of the foregoing, internet delivery of updated 
memory data can be substituted for wireless delivery. For 
example, the artist/song title memory in the personal player 
can be updated by placing the player in a "nest" every 
evening. The nest (which may be integrated with a battery 
charger for the appliance) can have an internet connection, 
and can exchange data with the personal device by infrared, 
inductive, or other proximity-coupling technologies, or 
through metal contacts. Each evening, the nest can receive 
an updated collection of artists/song titles, and can re -write 
the memory in the personal device accordingly. By such 
arrangement, the watermark data can always be properly 
intepreted for presentation to the user. 

The "Capture" concepts noted above can be extended to 
other functions as well. One is akin to forwarding of email. 
If a consumer hears a song that another friend would enjoy, 
the listener can send a copy of the song to the friend. This 
instruction can be issued by pressing a "Send" button, or by 
invoking a similar function on a graphical (or voice- or 
gesture-responsive) user interface. In response, the appli- 
ance so-instructed can query the person as to the recipient. 
The person can designate the desired recipient(s) by typing 
in a name, or a portion thereof sufiBcient to uniquely identify 
the recipient. Or more typically, the person can speak the 
recipient's name. As is conventional with hands-free vehicle 
cell phones, a voice recognition unit can listen to the spoken 
instructions and identify the desired recipient. An "address 
book"-like feature has the requisite information for the 
recipient (e.g., the web site, IP address, or other data 
identifying the location to which music for that recipient 
should stored or queued, the format in which the music 
should be delivered, etc.) stored therein. In response to such 
command, the appliance dispatches instructions to the 
clearinghouse, including an authorization to debit the send- 
er's credit card for the music charge. Again, the clearing- 
house attends to delivery of the music in a desired manner 
to the specified recipient. 

Still further, a listener may query the appliance (by voice, 
GUI or physical button, textual, gesture, or other input) to 
identify CDs on which the then-playing selection is 
recorded. Or the listener may query the appliance for the 
then-playing artist's concert schedule. Again, the appliance 
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can contact a remote database, relay the query, and forward 
data from the watermark payload identifying the artist 
and/or song title to which the query relates. The database 
locates the requested data, and relays same back to the 

5 apphance for presentation (via a display, by machine speech, 
or other output) to the user. If desired, the user can continue 
the dialog with a further instruction, e.g., to^buy one of the 
CDs on which the then-playing song is included. Again, this 
instruction may be entered by voice, GUI, etc., and dis- 

10 patched from the applicance to the clearinghouse, which can 
then complete the transaction in accordance with pre-stored 
information (e.g. credit card account number, mailing 
address, etc.). A confirming message is relayed to the 
appliance for presentation to the user. 

15 While the foregoing transactions require a link to a remote 
site or database, other watermark-based consumer services 
can be provided without such a link. For example, a user can 
query the appliance as to the artist or song-title of the 
selection currently playing. The appliance can consult the 

20 embedded watermark data (and optionally consult a memory 
to determine the textual names associated with coded water- 
mark data), and provide the requested information to the 
user (e.g., by a display, annunciation, or other output). 

The foregoing concepts (e.g. Capture, Send, etc.) can also 
be employed in connection with internet- rather than radio- 
delivery of music. (The following discussion is illustrated 
with reference to the "Capture" function, but it will be 
recognized that the other earlier-discussed features can be 
similarly implemented.) 

There are many commercial web sites that sell audio (in 
CD form or otherwise), and offer limited free music 
downloads, (or music clips) as an enticement to lure con- 
sumers. But there are also a great number of music web sites 

2j that have no commercial pretense. They are hosted by music 
lovers strictly for the enjoyment of other music lovers. When 
music is downloaded from such a web site, the end-user's 
computer can analyze the digital data to decode watermark 
data therefrom. Again, the user can be presented with a 
"Capture" button that initiates a commercial transaction, by 
which a complete copy of the then-downloaded audio is sent 
to a prearranged storage location, and the user's credit card 
is debited accordingly. This transaction can occur indepen- 
dently of the site from which the music is downloaded (e.g. 
through the clearinghouse referenced above). 

While the "Capture" button can be presented on the 
web-site, this would generally not be in keeping with the 
non-commercial nature of such web sites. Instead, in an 
exemplary embodiment, the Capture feature is a software 

50 program resident at the user's computer. When this software 
program is invoked by the user, a socket channel is instan- 
tiated between the user's computer and the clearinghouse 
over the then-existing internet connection. The decoded 
watermark data and user ID is transmitted to the clearing- 

55 house over this channel, without interrupting the user's other 
activity (e.g. downloading music from the non-commercial 
web site). In response, the clearinghouse transmits the music 
to the prearranged location and attends to billing. 

In some embodiments, a watermark detector is included 

60 as part of the operating system, and constantly monitors all 
TCP/IP, or other internet, data received by the user's 
computer, for the presence of watermarks. In such case, 
when the Capture feature is invoked, the program examines 
a memory location in which the operating system stores the 

65 mosl-recently received watermark data. In another 
embodiment, the computer does not monitor all internet 
traffic for embedded watermark data, but includes an API 



01/21/2004, EAST version: 1,4.1 



us 6,522, 

11 

that can be called by the Capture program to decode a 
watermark from the data then being received. The API 
returns the decoded watermark data to the Capture program, 
which relays same to the clearinghouse, as above. In still 
another embodiment, the watermark decoder forms part of 5 
the Capture program, which both decodes the watermark 
and relays it to the clearinghouse when the Capture program 
is invoked by the user. 

There are various techniques by which the Capture pro- 
gram can be selectively invoked. One is by a keyboard 
macro (e.g. by a combination of keyboard keys). Another is 
by a program icon that is always presented on the screen, and 
can be double-clicked to activate. (Again, confirmation 
processes may be called for, depending on the likelihood of 
inadvertent invocation.) Many other techniques are likewise 15 
possible. 

In the just-contemplated scenario, the Capture operation 
is invoked while the user is downloading music from a 
non-commercial web site. 'ITiis seems somewhat redundant, 
since the downloading — itself — is transferring music to the 
user's computer. However, the Capture operation provides 
added value; 

In the case of streaming audio, the audio is not typically 
stored in a location in which it can be re-used by the 

25 

consumer. It can be listened -to as delivered, but is then gone. 
Capturing the audio provides the user a copy that can be 
played repeatedly. 

In the case of downloaded music files, the music may 
have been encoded to prevent its recordal on other devices. 
Thus, while the user may download the music onto a desktop 
computer, copy-prevention mechanisms may prevent use of 
that file anywhere else, e.g. on a portable music appliance. 
Again, Capturing the audio provides the user a copy that can 
be transferred to another device. (The music file provided by 
the clearinghouse can have copy-prevention limits of its 
own— e.g., the file can be copied, but only once, or the file 
can be copied only onto devices owned by the user.) 

(Confirmation of device ownership can be implemented in 
various ways. One is to identify to the clearinghouse all 
music devices owned by a user at the time the user registers 
with the clearinghouse (supplemented as necessary by later 
equipment acquisitions). Device IDs associated with a user 
can be stored in a database at the clearinghouse, and these 
can be encoded into the downloaded music as permitted ^5 
devices to which the file can be copied, or on which it can 
be played.) 

The commerce opportunity presented by non-commercial 
music web-sites is but one enabled by digital watermarks. 
There are many others. 50 

To take one example, consider the media by which music 
and artists arc presently promoted. In addition to radio 
airtime, these include music videos (a la MTV), fan 
magazines, web advertisements, graphical icons (e.g. the 
Grateful Dead dancing bears), posters, live events, movies, 55 
etc. Watermarked data can be used in all such media as a link 
in a commercial transaction. 

A poster, for example, typically includes a photo of the 
artist, and may comprise cover- art from a CD. The photo/art 
can be digitally watermarked with various types of data, e.g., 60 
the artist's identify, the record label that distributes the 
artist's work, the music project being particularly promoted 
by the poster (e.g. a CD, or a concert tour), a fan web -site 
related to the artist, a web-site hosted by the record label for 
selling audio in CD or electronic form, a web-site from 65 
which free music by the artist can be downloaded, data 
identifying the poster itself, etc. 
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A user, equipped with a portable appliance that merges the 
functions of palmtop computer and digital camera, can snap 
an image of the poster. The processor can decode the 
watermarked data, and initiate any of various links based on 
the decoded data. 

In an exemplary embodiment, after snapping the picture, 
the user invokes a software program on the device that 
exposes ihe' various links gleaned from the snapped image 
data. Such a program can, for example, present the option of 
linking to the artist's fan web site, or downloading free 
streaming audio or music clips, or ordering the promoted 
CD, or requesting the above-noted clearinghouse to down- 
load a personal copy of selected song(s) by the artLst to the 
user's personal music library, etc. (The device is presumed 
to have a wireless internet link. In devices not having this 
capability, the requested actions can be queued and auto- 
matically executed when a link to the internet is available.) 

Still more complex transactions can be realized with the 
use of a remote database indexed by digital watermark fields 
decoded from the poster. For example, the poster may 
promote a concert tour. Fields of the digital watermark may 
identify the artist (by a code or full text), and a web site or 
IP address. The user appliance establishes a link to the 
specified site, and provides the artist identifier. In response, 
the site downloads the tour schedule for that artist, for 
display on the device. Additionally, the downloaded/ 
displayed information can include a telephone number that 
can be used to order tickets or, more directly, can indicate the 
class of seats still available at each (or a selected) venue, and 
solicit a ticket order from the user over the device. The user 
can supply requested information (e.g. mailing address and 
charge card number) over the return channel Link (wireless 
or wired, as the case may be), and the ticket(s) will be 
dispatched to the user. In the case of a wireless link, afi of 
this can occur while the user is standing in front of the movie 
poster. 

Similar systems can be implemented based on watermark 
data encoded in any other promotional media. Consider 
music videos. Using known TV/computer appliances, water- 
mark data added to such videos can readily be decoded, and 
used to establish links to audio download, CD -sales, fan 
club, concert ticket outlet web sites, etc., as above. 

Even live events offer such watermark-based opportuni- 
ties. The analog audio fed to public address or concert 
speakers can be watermarked (typically before 
amplification) to encode plural-bit digital data therein. A 
next generation personal music appliance (e.g. one with a 
wireless interface to the internet) can include analog record 
capability (e.g. a built-in microphone, analog-to-digital 
converter, MP3 encoder, coupled to the unit's semiconduc- 
tor memory). A user who attends a live event may record an 
excerpt of the music. The watermark can then be decoded, 
and the extracted data used to access the links and commerce 
opportunities reviewed above. 

Cinema movies offer both audio and visual opportunities 
for watermark-based commerce opportunities. Either 
medium can be encoded to convey information of the types 
reviewed above. A personal appliance with image- or audio- 
capture capabilities can capture an excerpt of the audio or 
imagery, decode the watermark data therefrom, and perform 
any of the linking, etc., functions reviewed above. 

The consumer-interest watermarks reviewed above are 
only exemplary. Many others will be recognized as useful. 
For example, promotional clips presented before a feature 
film presentation can include watermark data that point 
(either by a literally encoded web address link, or by an ID 
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code that indexes a literal link in a remote link database) to to a streaming signal, such as an internet or wireless 
reviewer critiques of the previewed movies. Watermark data transmission), it too should be so-altered, 
in a featured film presentation can lead to web sites with Likewise with playback limitations. ITie number of play- 
information about the movie stars, the director, the producer, backs remaining can, e.g., be encoded in an updated water- 
and can list other movies by each of these persons. Other 5 mark in the music, be tracked in a separate counter, etc. 
watermark-conveyed web links can present opportunities to j^yj-^ particularly considering the "copy once" usage 
buy the movie on videotape, to purchase the movie restriction, an illustrative embodiment provides two distinct 
soundtrack, to buy movie-related toys-and games, etc. watermark payload bits: a "copy once" bit and a "copy 

\ji ^ never" bit. When originally distributed (whether by internet, 

More on Device Control m • i *u • \ .u u \> l-* * * j *u 

wireless, or otherwise), the copy once bit is set, and the 

Much of the foregoing has focused on watermark encod- "copy never" bit is un-set. 
ing to provide enhanced customer experiences or opportu- ^^en music encoded in this fashion is provided to a 

nities. Naturally, watermarks data can alternatively, or compliant recording device, the device is authorized to make 
additionally, serve the interests of the media owner. ^opy compliant device is one that recognizes 

To illustrate, consider watermarked music. The media encoded watermark data, and behaves as dictated by the 

owner would be best served if the watermark serves dual watermark.) When this privilege is exercised, the recording 

purposes: permissive and restrictive. Permissively, music device must alter the data to ensure that no further copying 

appliances can be designed to play (or record) only music is possible. In the illustrated embodiment, this alteration is 

that includes an embedded watermark signaling that such effected by the recording device adding a second watermark 

activity is authorized. By this arrangement, if music is to both the music, with the "copy never" bit asserted. The 

obtained from an unauthorized source and does not include second watermark must generally be encoded in an 

the necessary watermark, the appliance will recognize that it "orthogonal" domain, so that it will be detectable notwith- 

does not have permission to use the music, so will refuse standing the continued presence of the original watermark, 

requests to play (or record). Compliant equipment must then check for both watermarks, 

As noted, music appliances can respond restrictively to and refuse to copy if either is found to have the "copy never" 

the embedded watermark data to set limits on use of the bit asserted. 

music. Fields in the watermark can specify any or all of (or One advantage to this arrangement is that if the water- 
others in addition to) (a) the types of devices on which the mark signal has undergone some form of corruption (e.g. 
music can be played (b) the types of devices on which the scaling or resampling), the first watermark may have been 
music can be recorded; (c) the number of times the music weakened. In contrast, the second watermark will be native 
can be played; (d) the number of times the music can be to the corrupted signal, and thus be more easily detected, 
recorded, etc. (Xhe corruption may also contribute to the orthogonality of 
The device restrictions (a) and (b) can be of various types. one watermark relative to the other, since the two water- 
In some embodiments, the restrictions can identify particular marks may not have precisely the same time base or other 
units (e.g. by serial number, registered owner, etc.) that are foundation.) 

authorized to play/record the encoded music. Or the restric- An alternative approach is not to encode the "copy never" 

tions can identify particular classes of units (e.g., battery- bit in the original music, but leave this bit (in whatever 

powered portable players with music memories of less than manifestation) blank (i.e. neither "1" nor "0"). In transform- 

50 megabytes, disk-based dedicated music appliances, gen- based watermark techniques, this can mean leaving trans- 

eral purpose personal computers, etc.) Or the restrictions can form coefi5cient(s) corresponding to the "copy never" bit 

identify particular performance quality criteria (e.g., two un-changed. If the watermarking is effected in the temporal 

channel, 16-bit audio at 44. IKHz sample rate, or lower sample domain (or spatial domain, for image data), this can 

quality). mean leaving certain samples (pixels) unmodified. The 
The use restrictions (c) and (d) can likewise be of various 45 recording device can then alter the transform coefficients 

types. Examples include "do not copy," "copy once only," and/or samples as necessary to assert the previously- 

"unresiricted copying permitted," "play once," "play N unencoded "copy never" bit when the permitted recording is 

times" (where N is a parameter specified elsewhere in the made. 

watermarked data, or by reference to a database indexed by In such a system, compliant recording devices check for 
a watermark data field), "unrestricted playing permitted," 50 the "copy never" bit in the sole watermark, and refuse to 

etc. make a copy if it is asserted (ignoring the value of any "copy 

It is straightforward to design a music appliance to once" bit), 
respond to usage limits of zero (e.g. "do not copy") and A third approach to "copy once" is to set both the "copy 

infinity (e.g. "unrestricted copying permitted," and "unre- once" and "copy never" bits, but set the former bit very 
stricted playing permitted"). The device simply examines 55 weakly (e.g. using lower gain and/or high frequency DCT 

one or more bits in the watermark data, and permits (or coefiScients that do not survive certain processing). The frail 

refuses) an operation based on the value thereof. "copy once" bit is designed not to survive common 

Implementation of the other usage-control restrictions can corruptions, e.g., resampling, scaling, digital to analog 

proceed in various ways. Generally speaking, the stored conversion, etc. To further assure that the "copy once" bit is 
music can be altered to give effect to the usage-control 60 lost, the recording device can deliberately add a weak noise 

restrictions. For example, if the music is "record-once," then signal that masks this bit (e.g. by adding a noise signal in the 

at the time of recording, the appliance can alter the music in frequency band whose DCT coefficient conveys the "copy 

a fashion indicating that it now has "do not record" status. once" bit). In contrast, the "never copy" bit is unchanged and 

This alteration can be done, e.g., by changing the watermark reliably detectable. 

data embedded in the stored music (or adding watermark 65 In such a system, compliant devices check for the "copy 

data), by changing other data stored in association with the once" bit in the sole watermark, and refuse to make a copy 

music, etc. If the original signal is stored (as opposed, e.g., if it is not detected as set. 
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These three examples are but illustrations of many pos- controls the advance and rewind of the media, permitting the 
sible techniques for changing the rights associated with a user to determine the location at which different watermark 
work. Many other techniques are known. See, e.g., the data begins and ends. Graphical paradigms known from 
proposals for watermark-based copy control systems for video- and audio-editing tools can be used to indicate the 
digital video at the Copy Protection Technical Working 5 starting and ending frames/samples for each different water- 
Group, http://www.dvcc.com/dhsg/, from which certain of ^^^^ payload. 

the foregoing examples are drawn. See also Bloom et al, Such a tool can be of the standalone variety, or can be 

"Copy Protection for DVD Video," IEEE Pioceedings, integrated into the desktop audio- and video- production and 

Special Issue on Identification and Protection of Multimedia editing tools offered by vendors such as Avid, Adobe, Jaleo, 

Information, Jan., 1999. lO Pinnacle Systems, SoundForge, Sonic Foundry, Xing 

Technology, Prosoniq, and Sonic Desktop Software. 

Scaleability Payment-Based Systems 

One feature that is desirable in many detector embodi- Another aspect of the present invention is the use of 

mcnts is scalcabaity. This refers to the ability of a detector anonymous payment tokens that can be used to obtain 

to scale its computational demands to match the compula- ^^^^^^^ embodiment, a token comprises 

tional resources available to it. If a detector is running on a ^ ^28-bit pseudo-random number, to which additional bits 

high performance Pentium III workstation, it should be identifying an issuing bank (or other issuing institution) are 

"doing more" than if the same detector is runnmg on a slow appended. (The additional bits can be the IP address of a web 

microcontroller. One way scalability can be achieved is by g^^ver of the bank, a routing number identifying the bank for 

processing more or less chunks of input data (e.g. temporal electronic wire transfers, or other identifier.) The 128-bit 

excerpts of music, or blocks/macroblocks of pixels in a numbers are randomly generated by the bank— commonly 

frame of video data) to decode watermarks. For example, an needed— and each represents a fixed increment of money, 

input audio stream might be broken into chunks of one ^ g cents. 

second each. A fast processor may complete decoding of " ^ ^^^^^^^^ wishing to have a store of currency for such 

each chunk m less than a second, permitting It successively 25 ^^^^^^^^ ^^^^ exchange for 100 

to process each chunk in the data stream. In contrast, a slow ^^^^^^ ^^^^^^ transferred electronically to disk or 

processor may require two and a half seconds to decode the ^^^^^ ^ consumer's computer in response, e.g., 

watermark from a chunk. While it is preceding a first chunk, ^ ^^^^^ ^^^^ authorization, or may be provided by diskette 

the second and third pass by un-decoded. The processor next ^^^^^ ^ ^^^^^ ^^^^ ^^^^^^^ ^ ^^^^ ^^^^^^ 

grabs and processes the fourth chunk, permitting the fifth ^^.^^ ^^^^^^^^ ^^^^^^^^^^ ^^p.^^ ^^^^^^^ 

and sixth to pass by un-encoded. -^^^ ^^^^^^^ computer). (Outlets other than 

The detector running on the fast processor is clearly more ^^nks can of course be employed for distributing such 

difBcult to "fool," and yields a decoded watermark of higher numbers, much in the manner that convenience and many 

confidence. But both systems decode the watermark, and grocery stores commonly issue money orders.) 

both operate in "real time." Imagine that the consumer wishes to view the final quarter 

llie skipping of input data in the temporal (e.g. music or of a Trailblazer basketball game that aired on television a 

video) or spatial (e.g. image or video) domain is but one week ago. (The consumer may have either missed the game, 

example of how scaleability can be achieved. Many other or may have seen it but wants to see the last quarter again.) 

approaches are known to those skilled in the art. Some of '|lie user directs a web browser to a web site maintained for 

these alternatives rely on spending more or less time in the such purpose and performs a search to identify the desired 

data analysis phases of watermark decoding, such as cross- program. (Typically, the web site is maintained by the 

correlation operations. proprietor that holds the copyright in the material, but this 

Reference has been made to watermarked UIDs as refer- need not be the case. Some material may be available at 

ring to a database from which larger data strings (e.g. web 45 several web sites, e.g., maintained by ABC Sports, the 

addresses, musician names, etc.) can be retrieved. In some NationalBasketball Association, and Sports Illustrated.) The 

embodiments, the data record referenced by a UID can, in search can use any of various known search engines, e.g., 

turn, point to several other database records. By such Infoseek, Verily, etc., and can permit searching by title 

arrangements, it is often possible to reduce the payload of terms, keywords, date of airing, copyright owner, etc. By 

the watermark, since a single UID reference can lead to 50 typing in, e.g., the keyword 'Trailblazers' and the date 

several different data records. '4/26/99,* the consumer is presented a listing of videos 

available for download. One, hopefully, is the requested 

Production Tools gancie. With each listing is an indication of an associated 

In the prior art, the watermark embedded in a source nominal charge (e.g. 80 cents), 

material is typically consistent and static through a work— 55 On clicking on a hypertext link associated with the 

unchanging from beginning to end. But as will be recog- desired basketball game, the viewer is presented a further 

nized from the foregoing, there are many applications that screen with one or more options. The first of the listed 

are better served by changing the watermark data dynami- options is the entire game, with commercials. The charge is 

cally during the course of the work. According to another the nominal charge presented on the earlier screen (i.e. 80 

aspect of the invention, a production tool is provided that 60 cents). Other options may include the first, second, third, and 

facilitates the selection and embedding of dynamically- fourth quarters of the game individually, each of which— 

changing watermark data. One such embodiment is a soft- save the last, costs 20 cents. The last may be charged at a 

ware program having a user interface that graphically dis- premium rate, e.g., 30 cents. Clicking on the desired video 

plays the different watermark fields that are being embedded option yields a further screen through which payment is 

in a work, and presents a library of data (textually or by 65 effected. 

icons) that can be inserted into each field, and/or permits the To pay for the requested video, the consumer instructs his 

user to type in data to be encoded. Another control on the Ul or her computer to transfer three of the earlier-purchased 
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tokens over the web to the video provider. Various user 
interface metaphors can be employed to facilitate this 
transfer, e.g., permitting the user to type the amount of 
money to be transferred in a dialog box presented on-screen, 
or dropping/dragging icons representing tokens from an 5 
on-screen "wallet" to an on-screen "ticket booth** (or over an 
icon or thumbnail representing the desired content), clicking 
on an "increment" counter displayed adjacent the listing.of 
the couieni, etc. Once the consumer has authorized a transfer 
of sufiScient tokens, the consumer's computer sends to the 
web site (or to such other web address as HTML encoding 
in the viewed web page may indicate) the tokens. TTiis 
transmission simply takes the fonm of the three 128+bit 
numbers (the indicating the bank identifier) — in what- 
ever packet or other format may be used by the intemet link. 
Once dispatched in this manner, the tokens are deleted from 
the user's computer, or simply marked as spent. (Of course, 
in other embodiments, a record of the expenditure may be 
stored in the consumer's computer, e.g., with the token 
contents and a record of the audio or video purchase to 
which they were applied.) 20 

Since the amount of money is nominal, no encryption is 
provided in this embodiment, although encryption can natu- 
rally be provided in other embodiments (e.g., either in 
sending the tokens from the user to the web site, or earlier, 
in sending the tokens to the user). As will be seen, provided 25 
that the media provider immediately sends the tokens to the 
bank in real time, encryption is a nice feature but not 
mandatory 

On receipt of the token data, the web site immediately 
routes the token data to the identified bank, together with an 3Q 
identifier of the media provider or account to which the 
funds represented thereby are to be credited. The bank 
checks whether the 128-bit numbers have been issued by 
that bank, and whether they have already been spent. If the 
numbers are valid, the bank updates its disk-based records to 35 
indicate that the three tokens have been spent and that the 
bank now owes the media supplier 30 cents, which it may 
either pay immediately (e.g., by crediting to an account 
identified by the media provider) or as one lump sum at the 
end of the month. The bank then sends a message to the web 
site confirming that the tokens were valid and credited to the 
requested account. (Optionally, a message can be sent to the 
purchaser of the tokens (if known), reporting that the tokens 
have been redeemed.) 

In response, the web site begins delivery of the requested 45 
video to the consumer. In the illustrated embodiment, the 
video is watermarked prior to dehvery, but otherwise sent in 
unencrypted fashion, typically in streaming format, but 
optionally in file format. (Encryption can be used in other 
embodiments.) The watermarking in the illustrated embodi- 50 
ment is accomplished on-the-fly and can include various 
data, including the date of downloading, the download site, 
the destination IP address, the identity of the purchaser (if 
known), etc. 

The large size of the video and the small charge assessed 55 
therefor provide disincentives for the consumer making 
iUicit copies. (Especially as to archival material whose value 
decays with time, there is not much after-market demand 
that could be served by illicit copies, making third party 
compilation of such material for re-distribution financially 60 
unattractive. First run video, and material that keeps a high 
value over lime, would not be as well suited for such 
distribution, and could belter employ technology disclosed 
elsewhere herein.) 

In some embodiments, the integrity of the received video 65 
is checked on receipt. This feature is described below in the 
section entitled Watermark-Based Receipts. 



,769 Bl 

18 

In the illustrative system, nothing in the tokens indicates 
the identity of the purchaser. The web site knows the IP 
address of the site to which video was delivered, but need 
not otherwise know the identity of the purchaser. The bank 
would probably maintain a record of who purchased the 
tokens, but need not. In any event, such tokens could 
thereafter be exchanged among consume rs^ resulting in 
anonymity from the bank, if desired. 

As described above, the video excerpts from which the 
consumer can select include commercials. At some sites, 
video may be provided from which the commercials have 
been excised, or which is delivered in a manner that skips 
past the commercials without transmitting same to the 
consumer. Such video will naturally command a premium 
price. In some embodiments, the difference in price is 
electronically credited as compensation to accounts main- 
tained for (or by) the advertisers, whose advertisements are 
not being viewed by such consumers. (The identification of 
advertisers to be credited is desirably permanently encoded 
in the video, either throughout the video (if the video has had 
the commercials removed therefrom), or by data in the 
commercials themselves (which commercials are skipped 
for transmission to the consumer, but can still be decoded at 
the video head-end. Such encoding can be by in-band 
watermarking or otherwise.) 

While the foregoing discussion particularly considered 
video as the desired content, the same principles are equally 
apphcable in connection with audio, still imagery, and other 
content. 

The token-based payment method is but one of many thai 
can be employed; the literature relating to on-line payment 
mechanisms is extensive, and all such systems can generally 
be here-employed. 

Tracking 1 28-bit tokens can be a logistical problem for 
the bank. One approach is to have a memory with 10^^® 
locations, and at each location store a two-bit value (e.g. 
00=never issued; 01=issued but not spent; 10=issued and 
spent; Unreserved). More complete data could alternatively 
be stored, but such a memory would be impractically large. 

One alternative approach is to hash each 128-bit number, 
when issued, to a much smaller key value (e.g. 20 bits). A 
memory with 10^° locations can be indexed by this key. 
Each such location can include four data: an issued 128-bit 
token number that hashes to that value, first and second date 
fields indicating the date/time on which that token was 
issued and redeemed, respectively, and a fink specifying the 
address of a next memory location. That next memory 
location (outside of the original 10^° locations) can include 
four more data, this time for a second issued-128-bit token 
number that hashed to the original key value, two date fields, 
and again with a link to a subsequent storage location, etc. 

When a 128-bil random number is generated, the original 
memory location indexed by the hash code of that number 
is checked for an earlier number of the identical value (to 
avoid issuance of duplicate tokens). Each successive loca- 
tion in the linked chain of memory locations is checked for 
the same 128-bit number. When the end of the linked chain 
is reached, the bank knows that the 128-bit random number 
has not previously been issued, and writes thai number in the 
last-addressed location, together with the date of issuance, 
and a link to a next storage location. 

When a 128-bit token is received, the same linked-list 
processing occurs to identify a first location, and to there- 
after step through each subsequent location until a match is 
found between the token number and the number stored in 
one of the linked memory locations. When found, that 



01/21/2004, EAST version: 1,4.1 



us 6,522; 

19 

number is marked as redeemed by writing a redemption 
date/time in the corresponding field. If the search reaches the 
end of the linked chain without finding a match between the 
stored numbers and the token number, the token is treated as 
invalid (i.e. not issued by that bank). 5 

Other manners of tracking the large number of possible 
token numbers can of course be used; the foregoing is just 
exemplaryrGr the tokens needn't be tracked at all. Such an 
arrangement is highly practical if the token has sufficient 
bits. With the illustrated 128 bits, for example, the chance of 
two identical tokens being issued is infinitesimally small, so 
checking for duplicate issuance can be omitted if desired. In 
such case, the bank can simply maintain an ordered list of 
the token numbers still outstanding and valid. As new tokens 
are dispensed, their token numbers are added to the list. As ^5 
tokens are redeemed, their numbers are deleted from the list. 
Known list processing techniques can be employed to speed 
such search, update, and delete actions. 

Watermark-Based Receipts 20 

Pay-for-content applications commonly assume that if 
content is transmitted from a server (or head-end, etc.), it is 
necessarily received. Sometimes this assumption is wrong. 
Network outages and interruptions and internet traffic load 
can diminish (e.g., dropped video frames), or even negate 
(e.g., failed delivery), expected consumer enjoyment of 
content. In such cases, the consumer is left to haggle with the 
content provider in order to obtain an adjustment, or refund, 
of assessed charges. 

30 

Watermarks provide a mechanism for confirming receipt 
of content. If a watermark is detected continuously during a 
download or other deUvery event, a software program (or 
hardware device) can issue an electronic receipt attesting 
that the content was properly delivered. This receipt can be 
stored, and/or sent to the content distributor to confirm 
delivery. 

In one embodiment, a content receiving device (e.g., 
computer, television or set-top box, audio appliance, etc.) 
periodically decodes a watermark from the received content 
to confirm its continued reception. For example, every five 
seconds a watermark detector can decode the watermark and 
make a record of the decoded data (or simply record the fact 
of continued detection of the same watermark). When a 
changed watermark is detected (i.e., reception of a different 43 
content object begins), the duration of the previously- 
received content is logged, and a receipt is issued. 

In a related embodiment, the last portion (e.g., 5 seconds, 
frame, etc.) of the content bears a different "end of content" 
watermark that triggers issuance of a receipt. Such a water- 50 
mark can indicate the length of the content, to serve as a 
cross-check against the periodic watermark polling. (E.g., if 
periodic sampling at 2 second intervals yields 545 samples 
corresponding to the same content, and if the "end of 
content" watermark indicates that the content was 1090 55 
seconds long, then receipt of the entire content can be 
confirmed.) 

In another embodiment, the watermark can change during 
the course of the content by including, e.g., a datum that 
increments every frame or other increment of time (e.g., 60 
frame number, time stamp, etc.). A watermark detector can 
monitor the continued incrementing of this datum through- 
out the content to confirm that no part was garbled (which 
would destroy the watermark) or was otherwise missing. 
Again, at the end of delivery, the receiving system can issue 65 
a confirmation that XXX frames/seconds/etc. of the identi- 
fied content were received. 
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One application of such technology is to bill for content 
based on receipt, rather than transmission. Moreover, bill- 
ings can be adjusted based on percentage of content -value 
received. If delivery is interrupted mid- way through (e.g., by 
the consumer disabling the content-receiving device), the 
nominal billing for the content can be halved. Some pro- 
longed content, e.g., televised/web-broadcast university 
classes, cannot be "consumed" in one session, and are thus 
particularly well suited for such pay-as-you-consume bill- 
ing. 

Another application of such technology is in advertising 
verification. Presently, ads are tracked by transmission or, 
less frequently, by detection of an embedded code on receipt 
(c.f., Nielsen Media Research's U.S. Pat. Nos. 5,850,249 
and 5,737,025). However, such reception-detectors — once 
triggered — generally do not further note the length of time 
that the advertising was received, so the same data is 
produced regardless of whether only five or fifty seconds of 
a commercial is presented. Watermark monitoring as con- 
templated herein allows the duration of the advertising 
impression to be precisely tracked. 

In one application of this technology, recipients of adver- 
tising are provided incentives for viewing advertising in its 
entirety. For example, a content-receiving device can 
include a watermark detector that issues a receipt for each 
advertisement that is heard/viewed in its entirety. These 
receipts can be redeemed, e.g., for content tokens as 
described elsewhere herein, for monetary value, etc. In some 
embodiments, receipts are generic and can all be applied to 
a desired premium, regardless of the advertisements through 
which they were earned. In other embodiments, the receipts 
are associated with the particular advertisers (or class of 
advertisers). Thus, a TV viewer who accumulates 50 receipts 
from advertising originating from Procter & Gamble may be 
able to redeem same for a coupon good for $2,50 off any 
Procter & Gamble product, or receipts from Delta Airlines 
may be redeemed for Delta frequency flier miles (e.g., at a 
rate of one mile per minute of advertising). Such incentives 
are particularly useful in new forms of media that give the 
consumer enhanced opportunities to fast-forward or other- 
wise skip advertising. 

(Although the foregoing "receipt" concept has been 
described in conjunction with watermark data (and use of 
watermark technology is believed to be inherently advanta- 
geous in this application), the same principles can likewise 
be implemented with ancillary data conveyed by other 
means.) 

Master Global Address 

As suggested above, it is desirable that each piece of 
content have a web address (the "Master Global Address" 
(MGA), or "Master IP Address") associated with it. Such 
address is typically conveyed with the content, e.g., by an IP 
address watermarked therein. 

Consider a consumer who downloads a streaming video 
having an English language soundtrack. The viewer may not 
speak English, or may otherwise prefer to listen to the 
soundtrack in another language. The user can decode the 
watermark data embedded in the video and initiate a link to 
the associated web address. There the user is presented with 
a list of soundtracks for that content object in other lan- 
guages. The viewer can click on the desired language and 
receive same via a second simultaneous transmission (e.g., 
a second socket channel), llie consumer's audio/video 
appliance can substitute the desired audio track for the 
default English track. 



01/21/2004, EAST version: 1.4.1 



us 6,522,769 Bl 

21 22 

If the streaming video and the alternative soundtrack are (b) open in 480x640 pixel format for ten cents; 

hosted on the same server, synchronization is straightfor- (c) open in 960x1280 pixel format for twenty cents; 

ward. The process governing transmission of the alternative (d) purchase rights to use this image in a newsletter 

soundtrack identifies the process that is streaming video to having a circulation of under 1000 for $1.25; 
the same IP address. Based on SMPTE, or other time/frame 5 (e) display a complete listing of license options, 

data, the former process syncs to the latter. (If the two data Clicking on options (b) or (c) initiates a commerce 

streams don't originate through the same server, time/frame application through whicb^ funds are electronicaily-tfaus- 

data can be relayed as necessary to the alternative fcrred to the MGA site (by the above-described tokens or 

soundtrack server to effect synchronization.) otherwise). In response, the MGA site responds (e.g., with 

Another application of the Master Global Address is to 10 TCP/IP or HTML instructions) authorizing an application on 

serve as a point to which monitoring stations can report the the user*s computer to open the file in the requested manner, 

presence, or passage, of content. Consider, for example, a (The default application for JPG applications can then 

copyright-aware node through which content signals pass, automatically be launched, or the computer may first query 

e.g., a computer node on a network, a satellite transponder, the user whether another application should be used 
etc. Whenever the node detects passage of a media object 15 instead.) 

(e.g., by reference to a file extension, such as MP3, JPG, Clicking on option (d) proceeds as above, and permits full 
AVI, etc.), it sends a "ping" over the internet to the address use of the image on the computer. Moreover, the MGA site 
encoded in the object, simply reporting passage of the sends a digital certificate to the user's computer memorial- 
object. Similar monitoring facilities can be provided in end izing the usage rights purchased by the consumer, 
user computers, e.g., reporting File Open, FileSave, Printing, 20 in this particular arrangement, no access control is placed 
or other use of content bearing MGA data. on the content, e.g., by encryption, secure container 
This system can be expanded to include "ping" and technology, or the like. The nominal fees, and the ease of 
"pong" phases of operation. When a software application (or licensing, make it simple for the user to "do the right thing" 
a user appliance, such as a video or audio playback device) and avoid copyright liability. In other embodiments, of 
encounters a media object (e.g., at time of file open, at time course, known access control techniques can be used to limit 
of playback, etc.), it pings the MGA site to report the use of the object until the requisite payment has been made, 
encounter. The MGA site "pongs" back, responding with Naturally, records of all such transactions are also logged 
instructions appropriate to the encounter. For example, if the at the MGA site. 

object requires payment of a fee before full functionality or Clicking on option (e) opens a browser window on the 

access is to be granted, the MGA site can respond to the user's computer to a web site that presents a complete listing 

application with instructions that the object be used (e.g., of license options available for that image. (The address of 

played back) only in some crippled state preventing the this web site is included in customization data relayed to the 

user's full enjoyment (e.g., impaired resolution, or impaired user device from the MGA site, but not explicitly shown to 

sound quality, or excerpts only, etc.). The MGA site can also the user on the menu.) Through such web site, the user can 

inform the user application of the terms (e.g., payment) by select desired rights, effect payment, and receive the neces- 

which full functionality can be obtained. The application can sary authorization for software applications on the user's 

graphically or audibly present such information to the user, computer (or other media appliance) to open and/or process 

who can authorize a payment, if desired, so that the content the content. 

can be enjoyed in a less- (or un-) crippled state. On receipt I'he object on which the user "clicks" needn't be an icon, 

of the payment authorization, the MGA site can inform the It can be an image or other graphical representation. (And a 

user application that enhanced access/usage rights have been "click" isn't necessary; a voice command or other signal 

purchased, and that the application may proceed accord- may be used to the same effect with an audio clip or 

ingly. selection.) 

Yet another application of the MGA is to present the user Consider the popular merchandising of books and CDs 

of a content object a menu of options that is customized to o^^r ^hc internet. A JPG or other image file depicting the 

that object. cover of a book, or the artwork of a CD cover, can be treated 

In current graphical operating systems, when a user clicks "^^^ ^ .^"^ ^"^^^^^ ^ watermarked MGA 
on an icon (e.g., with the right mouse button), a menu is pointer. Right-clicking on such an image of a book cover 
presented detailing actions that can be undertaken in con- ^^'^""^^ the MGA site, present to the user a menu of 
nection with the icon, or the file represented thereby. Such '° ^P^^^f . ^^^^ mcludes-in addition to those normaUy pre- 
options are pre-programmed (i.e., static), and are typically ^^"^^^ conjunction with a JPG file-the following: 
determined by the operating system based solely on the file (^) "See the review of this book published in the New 
extension ^"^^^ Times on Apr, 19, 1999" 

In accordance with this aspect of the present invention, 55 (*^) "^ee the list of reviews of this book at Amazon.com" 

clicking on an icon representing a media object initiates an (c) "Enter your own review of this book, for posting on 

internet link to the MGA site associated with the object. The Amazon.com" 

MGA site responds with data that is used to customize the (d) "Sec today's sales rank of this book at Amazon.com" 

menu of options presented to the user in connection with that (e) "Purchase this book from Amazon.com for $16.95" 

particular object. (f) "Purchase this book from Bamesandnoble.com for 

Consider an icon representing a JPG image file. Right- $19.95 and receive a $5.00 credit towards your next 

clicking on the icon may yield a menu that gives the user purchase" 

various options presented by the operating system (e.g., (g) "Link to the web site that tells about the release of this 

delete, compress, rename), and additional options custom- title as a motion picture (presently scheduled to open on 

ized in accordance with data from the object's MGA site. 55 Oct. 10, 1999)" 

These customized options may include, e.g., (h) "Link to the Yahoo listing of web sites relating to this 

(a) open in 100x150 pixel format for free; book" 
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(i) "Search Lycos for listings relating to this book." 

If the user selects one of the purchase options from the 
menu, a pre-stored e-commerce profile — containing the user 
name, credit card number, billing address, ship-to address, 
etc., possibly in the form of an encrypted object — could be 5 
sent to the MGA site (or to the bookseller) to effect the 
purchase, or such selection could initiate display of addi- 
tional-screens or sub-menus through' which the user would 
manually enter or select such information for transmission. 

Others of the selections cause a new browser window to lO 
open on the user's computer, opening to a URL specified in 
data relayed from the MGA site but not displayed to the user 
in the menu. Appropriate HTML instructions can be gener- 
ated to effect a particular query or other operation at the 
specified URL. 15 

In some embodiments, the customized menu presents 
only a single choice in addition to those normally provided 
by the operating system, e.g., "Link to home." Clicking on 
this option opens a browser window to a home page at the 
MGA for that object. On that page, the user is presented with 20 
all of the foregoing options, and more (possibly including 
advertising graphics or multi-media). Such objects can serve 
as powerful marketing agents. Returning to the example 
discussed above, a JPG image file of a book cover may have, 
as its MGA, a web page hosted by a particular bookseller, 25 
providing purchase options and other information for that 
book. Marketing of books (or CDs, or cars, or consumer 
appliances, or virtually anything else) can be effected by 
disseminating such vendor-issued JPGs as widely as pos- 
sible. Some book cover JPGs may be distributed by 30 
Amazon.com, others by Barnes&Noblc.com, others by 
Borders.com — each pointing back to a different MGA 
through which purchase transactions for that book may be 
performed. 

Returning to the MGA- customized menus, these needn't 35 
be limited to menus resulting from clicking on an icon or 
image (or signaling during an audio excerpt). Drop -down 
menus in application programs can likewise be populated 
with customized options, in accordance with customization 
data obtained from the MGA site for the object presently 40 
being accessed or used. Most graphical operating systems 
and application programs have well developed toolsets 
permitting such menu customization. Again, other data 
relayed from the MGA site is not shown to the user, but is 
employed by the computer (e.g., a browser program) to carry 45 
out menu options selected by the user. 

Again the foregoing techniques are equally applicable for 
still images, audio, video, and other forms of content, and 
can readily be adapted for use both with general purpose 
computers, software applications, and specialized media 50 
appliances. 

While, for expository convenience, the foregoing discus- 
sion contemplated embedding a literal URL address in the 
object as the MGA, more typically this is not the case. 
Instead, the MGA more commonly comprises identification 55 
data for the object (e.g. a 128-bit random ID), together with 
the URL for a name server computer that serves many 
(perhaps millions) of such objects (an example of the latter 
is the Digimarc MarcCentrc server). 

To obtain the desired data as detailed above, the user's 60 
computer (sometimes termed a client computer) links to the 
name server computer and provides the ID of the object 
being processed. The name server computer uses this ID to 
query a database, and obtains from the database the current 
IP address to which such queries should be routed. The name 65 
server computer can relay the request from the client com- 
puter to the correct destination address, or can return the 
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correct destination address to the cUent computer, which can 
initiate such a link itself. By such arrangement, the IP 
address ultimately associated with an object can be easily 
changed as needed, simply by changing the corresponding 
record in the name server database, without rendering obso- 
lete legacy objects having out-of-date addresses encoded 
therein. 

In some embodiments, the URL of the name server 
needn't be included in the watermark. In the absence of a 
specified URL, the client computer may direct such links to 
a default name server address instead (stored locally or 
remotely). If that server doesn*t recognize the object ID, it 
can return an error code, or pass the query on to other name 
servers. Those servers, in turn, can pass the query along to 
still other name servers if they don't recognize the object ID. 
In this fashion, an exponentially-large number of name 
servers might be quickly polled for information relating to 
the identified object. Alternatively, rather than encoding the 
complete IP address of the name server in an object 
watermark, the first N (e.g., 16) bits of the object ID might 
be used as a short-hand for one of 65,536 predetermined 
name server addresses, in accordance with data stored 
locally (e.g., on RAM or disk in the user's computer) or 
remotely (e.g., at a default name server IP address). 

While the basic concept idea behind embedding MGA 
data within an object is to point to a repository of data about 
the object, a pointer the other way may be achieved as well. 

As noted, the "ping" application of MGA data permits an 
MGA site to be informed of sites through which its object 
passes. More generally, the MGA site can log the originating 
address of each query it receives. Each such address can be 
presumed to have (or have had) a copy of the corresponding 
object. Media owners can thereby track the dissemination of 
copies of their media objects — at least insofar as use of such 
objects entails communicating with the associated MGA 
site. 

Such tracking offers a great number of opportunities, 
some in the area of commerce. ITie MGA site corresponding 
to the cover art of a Garth Brooks CD, for example, can 
provide a listing of IP addrCvSses of persons interested in that 
CD. Email or promotional data objects (e.g., audio clips) can 
be sent to that list of addresses when a subsequent Garth 
Brooks CD is released. 

Such tracking also opens up a new dimension of internet 
searching. Presently, internet search engines use a brute 
force approach, visiting millions of pages across the web in 
order to identify, for example, a dozen instances of a given 
photograph file. MGAs offer a shortcut to such brute force 
approaches. With the present technology, a search engine 
can find a single instance of a photograph file and, by 
detection of the MGA data watermarked therein, hnk to the 
corresponding MGA site. From the MGA site, the search 
engine can obtain a listing (if such queries are authorized) of 
some or all of the other sites known by the MGA site to have 
copies of that photograph file. (Providing such data to search 
engines is a commerce opportunity for such MGA sites, 
which may permit such access to its listing of sites only in 
exchange for a fee. Or the MGA site may arrange to collect 
a tribute payment from the search engine proprietor each 
time the engine responds to a user query using data collected 
from the MGA site.) 

Many of the addresses logged by the MGA may not be 
publicly -accessible data stores. The search engine can check 
each listed address to ensure that the desired object is present 
and accessible before adding the address to iLs database. 

Covert Tracing 

Co-pending application 09/185,380 describes anti- 
counterfeiting technology that looks for the presence of 
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digital data corresponding to bank note imagery in a com- computer can obtain the meta-data corresponding to the 

puter system, and makes a covert record of any attempt to object. This data can be stored at the client computer and 

process such data (e.g., Scan, FileOpen, FileSave, Print, used just as any other meta-data, e.g., to define the local 

Edit, etc.). Such records arc hidden from the user of the functions that should be available for use with that object 

system (using, e.g., various data encryption and obscuring 5 (e.g., buy, search, etc.) 

techniques), but authorized law enforcement officials are A particular example is an on-line catalog of stock pho- 

provided tools by which these records can be recovered. The tography. Each photograph is waterm^rked__wjth.MGA data, 

forensic data .thereby obtained may-prove usefuHir pros- To identity the~photographer, copyright date, price, tele- 

ecuting counterfeiters. (Knowledge that a computer may be phone number, subject, etc., an application program can link 

covertly storing evidence of attempted counterfeiting no to the MGA site for that photograph, and obtain the corre- 

actions may prove as, or more, valuable in deterring coun- sponding meta-data. This data can then be displayed or used 

terfeiting than the covert records themselves.) as needed. Data objects of disparate formats thus can readily 

llie same techniques can be employed to deter unautho- handled within a single, simple application program, 

rized processing of audio, image, video, or content by media ^^^^^ the program neednU concern itself with the varying 

pirates. In one embodiment, a computer's operating system ^5 formats for the associated meta-data (assuming the name 

(including peripheral device drivers) monitors various data servers provide this data in standardized format). Substantial 

within the system (e.g., data sent to writeable storage media, flexibility in programming and object formatting is thereby 

or sent via a serial port or network connection, etc.) for data achieved. 

bearing a do-not-copy watermark. The presence of such data Returning to the internet search engine example described 

being sent, e.g., to a writeable disk or to a remote computer, 20 above, MGAs may become recognized as repositories rich 

indicates that the do-not-copy instruction has been circum- meta-data for media objects. Specialized search engines 

vented. In such case, the operating system writes one or may focus their data collection around such sites, and be 

more covert records memorializing the activity, for possible able to quickly identify the MGA sites corresponding to 

use in criminal prosecution if the computer is lawfully various boolean combinations of meta-tag parameters, 

seized. ^5 Asset Management/Containers 

'llie example just-provided is but one of many monitoring ^^^^ ^^^^ ^^^^^ ^^p-^. ^^^^ ^g^^^ 

and response techniques that may be employed to deter jna^agement. Sample patent documents include U.S. Pat. 

circumvention of copy-protection or other access control 5,892,900, 5,715,403, 5,638,443, 5,634,012, 5,629,980 

systems. Generally speaking, if content data is found where kidopen European application EP 862,318. Much of 

it shouldn't be, or is found used as it shouldn't be used, a j^^j^^j^^j ^^^^ memorialized in journal articles, which 

corresponding record should be made. (Other intervention identified by searching for relevant company names 

actions can be triggered as well; covert tracing is desirably trademarks such as IBM's Cryptolope system, Portland 

just one of several parallel responses to suspected hackmg.) Software's ZipLock system, the Rights Exchange service by 

Meta-Data Accessed Using Watermarks 35 Softbank Net Solutions, and the DigiBox system from 

InterTrust Technologies. 

Meta-data, in formats known as XML, SGML, and An exemplary asset management system makes content 

HTML, is widely used to communicate information about available (e.g. from a web server, or on a new computer's 

digital objects (e.g., author, keywords, price, rights, caption, hard disk) in encrypted form. Associated with the encrypted 

etc.). More generally, meta-data can be thought of as any 40 content is data identifying the content (e.g. a preview) and 

data construct which associates the name of a property (e.g., data specifying various rights associated with the content. If 

"author), with the value of the property (e.g., "Mark a user wants to make fuller use of the content, the user 

Twain"). Such data commonly appears in a tag format, such provides a charge authorization (e.g. a credit card) to the 

as the following: distributor, who then provides a decryption key, allowing 

x.i.T'A " " ^^^^T^J^^r ux. -n ■ " 45 a cccss to thc con tent. (Such systems are of ten realized using 

<META NAME= author CONTENT-" Mark TWam > i • 

object-based technology. In such systems, the content is 

Meta-data is commonly exchanged between server and commonly said to be distributed in a "secure container") 

client computers in conjunction with the digital objects to Desirably, the content should be marked (personalized/ 

which they relate (e.g., the text of a Mark Twain book). serialized) so that any illicit use of the content (after 

As detailed herein, an important application of water- 50 decryption) can be tracked. This marking can be performed 

marking is likewise to convey information about media — in with watermarking, which assures that the mark travels with 

this case embedded within the media content itself (e.g., the content wherever — and in whatever form — it may go. 

providing unique identification, establishing some basic The watermarking can be ellected by the distributor — prior 

behaviors such as do not copy, and providing links to to dissemination of the encrypted object — such as by encod- 

extended functionality). 55 ing a UID that is associated in a database with that particular 

For meta-data to be useful, it must be linked to associated container. When access rights are granted to that container, 

content, whether in the context of a browser, application the database record can be updated to reflect the purchaser, 

program, operating system, asset management system, the purchase date, the rights granted, etc. An alternative is to 

search engine, etc. However, as detailed below, the content include a watermark encoder in the software tool used to 

and the associated meta-tags needn't always be conveyed 60 access (e.g. decrypt) the content. Such an encoder can 

together. embed watermark data in the content as it is released from 

Consider an application program or other client process the secure container, before it is provided to the user. The 

that receives a watermarked media object. The watermark embedded data can include a UID. This UID can be assigned 

includes an MGA for that object (which, as noted above, by the distributor prior to disseminating the container, 

may not specify an ultimate IP address). Stored at the MGA 65 Alternatively, the UID can be a data string not known or 

site is meta-data corresponding to the object. By linking to created until access rights have been granted. In addition to 

the MGA site identified by the object's watermark, the chent the UID, the watermark can include other data not known to 
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the distributor, e.g. information specific to the time{s) and Conclusion 

manner(s) of accessing the content. ,• ^ i- • i 

^ ^ ° Many diverse embodiments are reviewed above — each 

As noted earher, access rights systems can be reahzed ^ ^^-^^^ f^^^^^^ (^jj,, ^j^^^ disclosed in the 

with watermarks without containers etc. For example, m a assignee's patents incorporated by reference.) To provide a 
trusting world, copyrighted works can be treely available on 5 ^.^^ ^^^g^^j^g disclosure without unduly lengthening the 
the web. If a user wishes to make lawful use of the work, the 
user can decode its watermark to determine the work's terms 

and conditioijs of"use. Tnis may cnlair linking to a web site ^. . . , . , 

specified by the embedded watermark (directly, or through . specification should be construed as exphatly teach- 
an intermediate database), which specifies the desired infor- lO '"8 'hat features illustrated in one such embodiment can 

mation. The user can then arrange the necessary payment, 6^"^" "y embodiments as well. TTius for 

and use the item knowing that the necessary rights have been ^''^"'P'^ '^.^}^ particularly discussed m 

secured • connection with payload data for video watermarking. Nor 

were "play once" watermarks so-considered. The inclusion 
Remote Reconfiguration of Watermark Detectors 15 of a calibration signal with (or as part of) the watermark is 

- , shown in embodiments of the issued patents, but is not 
In some cases, it is desirable to reconfigure watermark ^^j^^^^^^ above-described embodiments. Likewise 
detectors remotely. Such functionality is desirable, for ^^^^ ..^j^ ,^ ^^j^^^^, ^^^^ „ ^-stored commerce 
example, if a watermark system is hacked or otherwise p^^g,^ ^^^^^^ ^^^^^.^^ embodiments is 
compromise . equally applicable to other embodiments as well. Likewise, 
In accordance with this aspect of the present invention, the presentation of advertising was discussed in connection 
some aspect of a watermark detector's operation is changed ^i^t, qo^. embodiment but not others, although it, too, is 
in response to a command. ^ITie change can take various generallv applicable. All of these concepts are familiar at 
forms. In watermark systems employing pseudo-random key Digimarc and are regarded as generally applicable through- 
data (e.g., spread spectrum spreading signals), the pseudo- ^^^t the work expressed in Digimarc's patent disclosures, 
random signal used for detection can be changed. In systems Practicality prevents an exhaustive recitation of each indi- 
using DFT processing, the mapping between message bits ^idual permutation and combination, 
and DFT coefficients can be changed. In still other systems, „ . . ... . , , • • , c 

ji.r u.i-* 'ri r Having dcscnbed and illustrated the principles of our 

the decoding can proceed as before, but the sign incancc of -.u r . n * u 1- * -n 

* u u J / u-r .u * invention with reference to illustrative embodiments. It will 

one or more bits can be changed (e.g., bits that were , . * .u j * i 1 * u i r 1 
. , , , J c • ij A u • . * J 30 be apparent that the detailed arrangements can be modified 

normally interpreted as defining Field A can be interpreted . ^ ^ j . -i -.u . ^ r i. 

j c • r- 1 J J • \ T . .t. . in arrangement and detail without departing from such 

as defining Field B, and vice versa). In yet other systems, the . . , ^ * & 

decoding can proceed as before, but the response of a device 

to a given watermark signal can be changed. In still other example, while reference has been made to various 

systems, a set of software instructions can be re- written or ^^es of wireless, it should be understood that such reference 

re-ordered to effect a change in detector operation. ^^^^ ^ot just cover FM broadcast, and wireless internet 

Tlie command can be conveyed in various ways. In one networking and the like, but also includes other wireless 

embodiment, it can be a trigger bit in the watermark payload. ^ 
Normally the bit has a value of "0." If the bit has a value of 

"1," the detector system responds by changing its operation. Likewise, while certain embodiments were illustrated 

A trigger pattern can also be established, so that detection of with a watermark payload of 100+bits, in other systems 

a certain combination of bits in the watermark payload "^"ch smaller (or sometimes larger) payloads are 

serves to trigger the change. Reserved states of certain data desirable — sometimes as small as 1-8 bits, 

fields are examples of patterns that might be employed. While the foregoing examples have each been illustrated 
The command can also be conveyed through another 45 with reference to a particular media type (e.g., video, audio, 

channel different than the watermark channel (e.g., an SCA etc.), it will be recognized that the principles of each 

channel of an FM broadcast, or the sub-titling data channel embodiment find application with the other media types as 

of video broadcasts, or header data within an MPEG data well. 

stream, etc., etc.). Certain of the appliances contemplated above require user 
The change can proceed in accordance with a pre- 50 interfaces more sophisticated than are presently typical on 

programed rule (e.g., codes progressing successively such devices. The simplicity of the underlying audio apph- 

through a numerically or algorithmically-dctermined ance can be preserved, in many instances, by using a 

progression), or the change can proceed in accordance with palmtop computer— coupled by infrared or otherwise— as a 

data specified elsewhere in the payload of the watermark temporary user interface to the appliance. Some of the 
bearing the trigger bit (e.g., instead of being interpreted in 55 Processing capability can likewise be off-loaded to an ancil- 

normal fashion, the non-trigger bits of the detected water- lary palmtop. (Palmtop is here meant to refer generally to 

mark can define a new pseudo-random key data. Or the any pocket-size programmable computing device.) 

change can proceed in accordance with data conveyed in Unless otherwise stated, it should be understood that the 

successively -presented watermark payloads, as might be digital music, video, and imagery contemplated herein is not 
done in video encoding where each frame of video can 60 of any particular form or format. Audio, for example, can be 

convey further watermark information. (This latter arrange- of various forms, both streaming and non-streaming, and of 

ment is one offering a high-bandwidth re-prograraming various formats (e.g. MP3, MP4, MS Audio, Windows 

channel through which, e.g., extensive firmware instructions Media Technologies, RealAudio, *.WAV, MIDI, Csound, 

might be transferred to the detector to replace instructions Dolby's Advanced Audio Codec (AAC), etc. 
earlier stored.) 65 Having described and illustrated the principles of the 

By such arrangements, greatly increased detector versa- invention with reference to illustrative embodiments, it 

tility and functionality can be achieved. should be recognized that the invention is not so limited. 
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For example, while digital watermarking typically does detector in accordance with a preprogrammed rule in the 

not leave any human-apparent evidence of alteration or data watermark detector. 

representation, certain of the foregoing applications do not g xhe method of claim 5 wherein the preprogrammed 

require this. The markings used may be visible, and even ^^^^^^ ^ ^ watermark key. 

conspicuous, without impairing essential runctionahty. 5 „ ^ , t 7 t ■ , - ^ • - r 

Thus, bar codes, data glyphs, OCR markings, and other ^- ^he method of claim 1 wherem changmg operation of 

machine-readable indicia may be substituted, depending on ^he watermark detector includes changmg a watermark key 

the -particular application-requireraents. used to "decode a" watermark. 

While the detailed embodiments were generally described 8. The method of claim 7 wherein the watermark key 

with reference to desktop computers, it is recognized that comprises pseudo-random key data, 

such devices will increasingly be supplanted by other digital 9 j^e method of claim 1 wherein changing the operation 

appliances, including general purpose personal digital watermark detector includes changing how the detec- 

assistants, multifunction cell phones, and speciahzed . . . ^ , . , 

devices. Moreover, the power and utility of the above- ^^^^P^^^s one or more bits of a watermark payload. 

detailed embodiments and devices can be further enhanced ^he method of claim 1 wherem changmg the opera- 

by employing various wireless communications lion of the watermark detector includes changing a response 

technologies, including the evolving Bluetooth standard. of a device to a watermark signal. 

The implementation of the watermark encoding and H- The method of claim 1 wherein the command signal 

decoding systems is straightforward to artisans in the field, comprises a combination of bits of a watermark payload. 

and thus not belabored here. Conventionally, such technol- 12. The method of claim 1 including: 

ogy is implemented by suitable software, stored in long term changing the operation of the watermark detector with 

memory (e.g disk. ROM etc.), and transferred to tempo- ^^^^ ^^^.^^^ ^ watermark payload. 

rary memory (e.g., RAM) for execution on an associated ^^r,,. -ir.-^-^L u 

CPU. In other implementations, the functionality can be ^^^'"^ ^^^^^^^ ^^g^^* 

achieved by dedicated hardware, or by a combination of ^5 comprises a one or more bit trigger in the watermark 

hardware and software. Reprogrammable logic, including payload. 

FPGAs, can advantageously be employed in certain imple- 14, The method of claim 12 wherein the data comprises a 

mentations. watermark key in the watermark payload. 

It should be recognized that the particular combinations of 15. The method of claim 14 wherein the watermark key 

elements and features in the above -detailed embodiments 3Q comprises pseudo-random key data. 

are exemplary only; the interchanging and substitution of 16. The method of claim 12 wherein successively- 

these teachings with other teachings in this and the presented watermark payloads in the signal provide the data 

lem Ta^er'^'*'^"'^^'''''"''^ patents/applications are also con- operation of the watermark detector. 

, ' . . ^ . . , , 17. A method for reconfiguring a watermark detector 

In view of the wide variety of embodunents to which the 35 . . 

principles and features discussed above can be applied, it comprising. 

should be apparent that the detailed embodiments are illus- receiving a media object and a command associated with 

trative only and should not be taken as limiting the scope of the media object signaling that the watermark detector 

the invention. Rather, we claim as our invention all such requires an upgrade to decode a watermark from the 

modifications as may come within the scope and spirit of the 40 media object; 

wrdfim"™' '"'^ equivalents thereof. ^^p^^^^ ,^ command, updating the watermark 

e c aim. ^ . , , detector to create an updated watermark detector; and 

1. A method for reconfiguring a watermark detector 

comprising: decoding the watermark from the media object with the 

decoding a watermark embedded in a signal of a media 45 ^P^^^^^ watermark detector. 

type, where the watermark includes a command signal ^h*^ "^^^^^od of claim 17 wherem the command is 

used to trigger a change in operation of the watermark embedded into the media object in a watermark, wherein the 

detector* watermark is perceptibly adapted to the signal such that the 

based on the command signal, changing operation of the watermark is hidden in human perceptible portions of the 

watermark detector, including changing how the water- 50 signal. 

mark detector decodes or interprets a watermark in a 19. The method of claim 17 wherein the command is 

signal of the media type; wherein the watermark is conveyed in channel different than a watermark channel in 

perceptibly adapted to the signal such that the water- the media object, and the channel conveying the command 

mark is hidden in human perceptible portions of the is transmitted along with the media object, 

signal. 55 20. The method of claim 19 wherein the command is 

2. The method of claim 1 wherein the command signal is conveyed in a header of a file including the media object, 
represented as one or more bits in a payload of the water- 21. A re-programmable watermark detector comprising: 

^^I^' , . r . • a watermark decoder for detecting a command to upgrade 

3. The method of claim 1 wherein changing operation of detector- and 
the watermark detector comprises re-programming the 60 

watermark detector detector instructions that are replaceable in response to 

4. The method of claim 3 wherein changing operation of detecting the command to upgrade the detector; 
the watermark detector includes transferring instructions wherein the detector instructions control decoding of 
from a remote location to the detector to replace instructions watermarks embedded in media signals and are 
stored earher in the detector. 65 replaceable with a different set of instructions for 

5. 1'he method of claim 1 wherein changing operation of controlling decoding of watermarks in response to the 

the watermark detector includes changing the watermark command to upgrade the detector. 
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22. The detector of claim 21 wherein new instructions are 
conveyed to the watermark detector along with a media 
object, wherein the watermark is perceptibly adapted to the 
signal such that the watermark is hidden in human percep- 
tible portions of the signal. 5 

23. The detector of claim 22 wherein the new instructions 
are conveyed in a watermark pay load to the watermark 
uecoder Tor decoding. 

24. The detector of claim 22 wherein the detector decodes 
watermarks embedded in media objects of a media type, and lO 
the new instructions are conveyed along with at least one 
media object of the media type in a channel different than a 
watermark embedded in the at least one media object. 

25. The detector of claim 24 wherein the new instructions 
are provided in a media object file that includes a media 15 
object of the media type. 

26. The detector of claim 25 wherein the media object 
comprises an image signal. 

27. The detector of claim 25 wherein the media object 
comprises an audio signal. 20 

28. A method of encoding an upgrade trigger in a water- 
mark comprising: 
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receiving a media object of a given media type; 

encoding a watermark into the media object, where the 
watermark includes a command signal used to trigger a 
change in operation of a watermark detector, the 
change being operable to change how the watermark 
detector deccxJes or interprets_a watermark in a signal 
of the media type, wherein the watermark is perceptibly 
adapted to the signal such that the watermark is hidden 
in human perceptible portions of the signal. 

29. The method of claim 28 including encoding the 
command in a pay load of the watermark, 

30. The method of claim 28 including encoding one or 
more instructions in the payload of the watermark. 

31. The method of claim 28 including: 

transmitting the encoded media object to one or more 
watermark detectors from a location remote to the one 
or more watermark detectors. 
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